17635 matches found
Fake CISO Profiles on LinkedIn Target Fortune 500s
Someone has recently created a large number of fake LinkedIn profiles for Chief Information Security Officer CISO roles at some of the worlds largest corporations. Its not clear whos behind this network of fake CISOs or what their intentions may be. But the fabricated LinkedIn identities are...
Code injection
An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information such as PII. This allows oversighters to whitewash revisions...
Egavilan Media Resumes Management and Job Application Website SQL Injection Vulnerability
Resumes Management and Job Application Website is a simple application that can be used for small business or student projects. version 1.0 of Egavilan Media Resumes Management and Job Application Website is vulnerable to SQL injection vulnerability, which can be exploited by attackers to obtain...
PT-2022-8277 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...
Open redirect
The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”...
caritadesain.com Cross Site Scripting vulnerability OBB-2960309
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
4 times students compromised school cybersecurity
For many students school can be a tough time, and we've all heard stories about bored or frustrated kids compromising school cybersecurity to change grades. Sometimes the students are celebrated, and other times it ends in them being expelled from school, or even prosecuted. Of course, these acts...
CVE-2022-2760
CVE-2022-2760 describes an information-disclosure issue in Octopus Deploy: when a resource is part of another Space, an error message can reveal the Space ID of spaces the user is not authorized to view. The available connected documents do not specify affected versions, exact root-cause details ...
CVE-2022-23006
CVE-2022-23006 is a stack-based buffer overflow affecting Western Digital My Cloud Home, My Cloud Home Duo, and SanDisk ibi. The issue allows a local attacker to read the /etc/version file by exploiting a vulnerable code path that relies on insecure functions; exploitation requires chaining with ...
Use After Free in function did_set_string_option
Description Use After Free in function didsetstringoption at optionstr.c:2456. vim version git log commit 8279af514ca7e5fd3c31cf13b0864163d1a0bfeb grafted, HEAD - master, tag: v9.0.0598, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...
CVE-2022-3042
Use-after-free in PhoneHub within Google Chrome on Chrome OS (CVE-2022-3042) allows heap corruption via a crafted HTML page on versions prior to 105.0.5195.52. Affected software is Google Chrome/Chromium with PhoneHub integration; root cause is use-after-free in the PhoneHub component. Impact is ...
Simple Yet Vital Ways to Safeguard Yourself Against Online Threats
By Owais Sultan With most people being online for most of the day, whether for personal reasons or work-related tasks, cybersecurity… This is a post from HackRead.com Read the original post: Simple Yet Vital Ways to Safeguard Yourself Against Online Threats...
Security Bulletin: Multiple vulnerabilities exist in IBM Data Studio Web Console, Optim Performance Manager, IBM InfoSphere Optim Configuration Manager, and DB2 Recovery Expert for Linux, UNIX and Windows (CVE-2013-4025, CVE-2013-4024, CVE-2013-4022)
Abstract Multiple vulnerabilities exist in IBM Data Studio Web Console, Optim Performance Manager, IBM InfoSphere Optim Configuration Manager, and DB2 Recovery Expert for Linux, UNIX and Windows which could allow an attacker to view sensitive information or perform actions as a compromised user...
Hackers Exploited Zero-Day RCE Vulnerability in Sophos Firewall — Patch Released
Security software company Sophos has released a patch update for its firewall product after it was discovered that attackers were exploiting a new critical zero-day vulnerability to attack its customers' network. The issue, tracked as CVE-2022-3236 CVSS score: 9.8, impacts Sophos Firewall v19.0 M...
CVE-2022-32819
creationtimestamp| type| source ---|---|--- 2022-09-23 22:27:03+00:00| seen| https://t.me/cibsecurity/50409...
CVE-2022-32805
CVE-2022-32805 affects macOS; the issue was addressed by improved cache handling and is fixed in Security Update 2022-005 for Catalina, Big Sur 11.6.8, and Monterey 12.5. An app may have been able to access sensitive user information. Mitigation provided by Apple via the listed security update; n...
CVE-2022-32781
CVE-2022-32781 affects Apple platforms (macOS Catalina, Big Sur, Monterey; iOS/iPadOS) with impact of potentially allowing an app with root privileges to access private information. The vulnerability was addressed by enabling hardened runtime and is fixed in macOS Monterey 12.4, iOS 15.5, iPadOS ...
CVE-2022-35246
Rocket.Chat’s CVE-2022-35246 is a NoSQL-Injection information disclosure in the getS3FileUrl Meteor server method. The vulnerability allows an authenticated user to disclose the redirect URL of arbitrary file uploads, due to insufficient access checks when retrieving the file URL. Affected versio...
Morgan Stanley's years-long "extensive failure" to protect customer data ends in huge fine
On Tuesday, the Securities and Exchange Commission SEC charged financial company Morgan Stanley a $35M fine for "the firm's extensive failures, over five years, to protect the personal identifying information, or PII, of approximately 15 million customers. The company agreed to settle the penalty...